🔥 40% Off Crucial Exams Memberships — Deal ends today!

1 hour, 52 minutes remaining!

GCP Professional Data Engineer Practice Question

Your company stores customer_orders in BigQuery and feeds several Looker Studio dashboards. Internal analysts need unrestricted access, but a third-party call-center vendor should:

  • see only the rows where region_code equals their assigned region,
  • see a masked version of the credit_card_number column, and
  • have no direct IAM access to the underlying table or its storage objects. Which approach meets the security requirements with the least ongoing maintenance effort?
  • Grant the vendor the BigQuery Data Viewer role on the dataset, attach a dynamic masking policy to credit_card_number, and add a row-level security policy on region_code.

  • Build a materialized view that filters by region_code and hashes credit_card_number, rely on automatic refresh, and grant the vendor access only to this materialized view.

  • Tag credit_card_number with a masking policy using column-level security, define a row-level access policy on region_code, and publish the dataset as a listing in Analytics Hub for the vendor to subscribe to.

  • Create an authorized view that filters on region_code and masks credit_card_number, then share only the view with the vendor.

GCP Professional Data Engineer
Preparing and using data for analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot